draft-parecki-oauth-jwt-dpop-grant

OAuth 2.0 JWT Authorization Grant with DPoP Binding

groupnone stateactive pages7 rev01 expires2026-08-03 canonicalhttps://datatracker.ietf.org/doc/draft-parecki-oauth-jwt-dpop-grant/
This specification defines a new OAuth 2.0 authorization grant type that uses a JSON Web Token (JWT) assertion to request an access token that is bound to a specific key using the Demonstration of Proof-of- Possession (DPoP) mechanism. This provides a higher level of security than a simple bearer token, as the client must prove possession of the key to use the access token.